On Sat, Feb 17, 2007 at 05:09:26PM -0700, Theo de Raadt wrote:
quoted text > > Most modern Linux distributions optimize dynamic library load using
> > prelinking; 4.0 and later have a comparable idea implemented
> > ('prebind'), but in a way that does not interfere with OpenBSD's
> > security features. This is not enabled by default (I'm not sure why not,
> > and would be very grateful if anybody would tell me, BTW),
>
> The pkg tree is not yet ready to do the right thing for this, heck,
> even the base is not fully prepared for this to be on by default.
> Prebind appends an information block to the end of libraries, and
> there are some more details which need to be considered, and handled.
>
> Furthermore, anytime you did a 'make build' of your system, the prebind
> information changes in that information block, and when any of it is
> invalid, it ignored, and you are right back in the un-optimized mode.
> That's safe, and fine, but there are issues.
>
> Like everything else in OpenBSD, we make it available early, and then
> we turn it on when we are confident. You don't even need to know the
> above details -- just trust we are making the right decisions.
Okay, that's about what I expected. Thanks!
And, frankly, if I didn't have a lot of confidence in you guys making
the right decisions, I wouldn't be running OpenBSD. I *do* like
understanding how stuff works, though.
Joachim
